Privacy Policy

Signal 9 Cyber Solutions LLC collects the minimum needed to run an account, deliver work, and get paid. This page says what that is, who else sees it, and how to get it removed.

What we collect

• Account details: your name, email address, and organization. If you sign in with Microsoft we receive your name, email address and the directory object identifier for your account; we do not receive your password.
• Sign-in activity: session records including IP address, browser user agent and timestamps, together with the approximate city, country, network operator and coordinates our network provider derives from that IP address. This is recorded once, when a session is created, and describes where the sign-in came from rather than where you are now — it is what lets you recognise a session that is not yours. You can see and revoke these yourself in the portal.
• Support content: whatever you write in a message to us, visible to everyone in your organization and to our staff.
• Billing records: contact details and transaction history. Card numbers are handled by Stripe and never reach our systems.
• Engagement material: information you share with us during platform engineering work, handled under the confidentiality terms of your SOW.

We do not use tracking or advertising cookies, and we do not sell personal information. The only cookies set are the ones that keep you signed in.

Why we hold it

To provide and secure the portal, to perform contracted work, to invoice, and to meet legal and accounting obligations. Where the GDPR or UK GDPR applies, our basis is performance of a contract, our legitimate interest in operating and securing the service, and compliance with legal obligations.

Who else processes it

We use a small number of subprocessors, each named with what it handles, on the subprocessors page. We do not share personal information with anyone else except where the law requires it.

Controlled unclassified information

This portal runs on commercial infrastructure that is not authorized to hold CUI, so it is not accepted here: support requests take no attachments, and no document storage is offered. Where an engagement involves CUI we agree a separate handling arrangement in the SOW.

Retention and your rights

Account and support records are kept while your organization has an account and for up to seven years afterwards where needed for tax, accounting or dispute purposes. Sessions stop working when they expire, and can be revoked sooner by you; the record of one — including the sign-in location described above — is kept after that as part of your account's security history, and is removed when the account is.

You can ask for a copy of your personal information, correction of it, or its deletion. Email contact@signalnine.org and we will respond within 30 days. Deleting an account removes it and its support history, subject to records we must keep by law.

Contact

Privacy questions and requests: contact@signalnine.org.